Comments (5)
I have exactly the same problem.
Let me know when the issue will be fixed
The 2 rules below for the "securityAlertPolicies" seems not compatible with any API versions
"jsonPath": [ "$.properties.emailAccountAdmins" ], "matchType": "Boolean", "data": { "value": true }
+
"jsonPath": [ "$.properties.emailAddresses" ], "matchType": "StringWhitespace",
See my pull request :
#764
"jsonPath": [ "$.properties.emailAccountAdmins" ], "matchType": "Boolean", "data": { "value": true }
replaced by
"jsonPath": [ "$.properties.emailAddresses" ], "matchType": "ItemCount", "data": { "type": "GreaterThanOrEqual", "value": 1 }
from devopskit.
I see some very weird behaviour for this control in ARM template check. Even when using the compliant ARM template for SQL Server, the ARM Template check fails due to expecting a boolean value for the emailAccountAdmins property. But the ARM Template showcases a string property with value 'Enabled', and doing an ARM deployment validation fails if this property is a boolean whenever the api version is 2015-05-01-preview.
Browsing the official docs I cannot find support for 2015: https://docs.microsoft.com/en-us/azure/templates/microsoft.sql/2015-05-01-preview/servers/securityalertpolicies
only 2017 api version seems official: https://docs.microsoft.com/en-us/azure/templates/microsoft.sql/2017-03-01-preview/servers/securityalertpolicies
from devopskit.
@VincentLepape did you also experience the same issue for the disabledAlerts property? I can see that the matchType is the same as for emailAddresses but the official ARM template has it as a string array.
from devopskit.
Another thing to note is that even though the failed results is being added to an exclusion file and the failures are correctly set to Skipped, the overall task is still failing. My guess is that its due to some internal exception during evalution of Microsoft.Sql/servers/securityAlertPolicies
resources.
When I remove all Microsoft.Sql/servers/*
resources from the template, but still have other resources with some failures added to exclusion file, the overall task succeeds as expected.
from devopskit.
This seems to have been resolved in the latest AzSK 4.6.0 release. At least we are no longer getting failures from Microsoft.Sql/servers/*
.
from devopskit.
Related Issues (20)
- Feature Request exclude passed controli ds from log
- Override values for Azsk.Azdo
- Support AzSKARMTemplateChecker task on Ubuntu agent HOT 1
- Secure DevOps Kit (AzSK) CICD Extensions - AzSKARMTemplateChecker task fails if template does not contain supported resources HOT 2
- Fail to upgrade Org Policy with AzSK from 4.4.0 to 4.10.0 HOT 3
- Azure_Storage_DP_Encrypt_In_Transit Failing unused property in Storage Account Blobservices ARM Template HOT 1
- Not showing azsk monitoring solution in Azure log analytics workspace HOT 1
- Azure_AppService_Audit_Enable_Logging_and_Monitoring fails when two Diagnostics settings are configured, but only one has all required logs enabled HOT 2
- Bypass 'Get-AzSKAzureServicesSecurityStatus' cmdlet's confirmation prompt for attestation HOT 2
- AzSK version 4.12 Security Status Report does not create SecurityEvaluationData json
- Module not catalog signed HOT 1
- AzSK 4.14 Install-AzSKContinuousAssuranceForCluster: Any way to run in a non-interactive mode
- Installation error HOT 1
- Logic app accesscontrol validations HOT 1
- Enable Eventhub output for Central CAs HOT 2
- Support for Azure Blueprints? HOT 1
- AzTS exceptions - System.ArgumentException: Requested value 'CDN' was not found. HOT 2
- Intermittent Error Thrown-Unable to deserialize the response. HOT 5
- Install-AzSKOrganizationPolicy results in erroneous message about Only Alphanumeric characters are allowed.
- ARMTemplateChecker - Enable Azure AD admin for the SQL Database - False positive with linked templates HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from devopskit.